Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File:                     vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier:          0IsEfCMl0n/q08AOlkabSYXXRgVhUPwjaX5OSlySYhg=
Subject key identifier:   78:98:CD:6C:03:90:37:9C:3A:D3:FC:06:C6:5E:61:27:A3:04:DA:AA
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer:       /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial:       019D9B51435BFBF30B0EDA463E6E9E8E5C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 12:01:27 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:27 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:27 +0000
Files and hashes:         1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
                          2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
                          3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
                          4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: RcskEVDi3AphkZGnh1y5Kf9a1H5ZR79wslcZdw2Nsio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:43:5b:fb:f3:0b:0e:da:46:3e:6e:9e:8e:5c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
        Validity
            Not Before: Apr 17 12:01:27 2026 GMT
            Not After : Apr 18 12:01:27 2026 GMT
        Subject: CN=7898cd6c0390379c3ad3fc06c65e6127a304daaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:7d:7f:8e:0d:fc:cb:73:5b:0f:e7:8f:11:
                    bc:c6:7b:a6:a9:21:aa:a3:8a:80:3b:9a:07:97:ce:
                    ae:f5:81:4a:e4:27:7d:9d:a0:7b:55:dc:54:03:79:
                    87:00:27:a9:43:07:a3:11:fc:9c:82:c5:34:27:7e:
                    95:9d:7f:39:7b:7f:8e:12:ba:cc:df:3d:08:a4:2f:
                    ec:a0:9f:13:e9:a5:bb:9a:a4:4e:a7:63:39:7d:7d:
                    0e:c7:5c:1e:dc:53:38:ad:3d:b8:f3:bc:30:b7:ff:
                    60:2d:d2:cf:ea:f5:bd:dd:8a:74:b8:48:3b:98:74:
                    33:8d:1c:51:ed:e5:31:64:b0:75:a6:7d:d0:07:7e:
                    05:d7:7b:88:a2:c5:21:22:65:0a:06:09:d4:fe:b9:
                    9a:16:c1:c7:b8:3d:63:42:69:4a:75:06:26:d9:bc:
                    6e:14:39:6e:95:73:4b:42:93:69:6b:a6:93:3a:1e:
                    21:e6:df:06:39:90:76:f1:41:5a:29:46:7f:34:e9:
                    f1:65:06:db:ca:6f:e2:76:fe:d5:ed:5c:61:5b:bb:
                    c8:0b:19:50:3f:ea:e4:78:dc:89:b6:98:1a:b5:61:
                    0f:00:29:56:24:c8:34:bd:00:81:d9:01:4a:4f:3b:
                    d0:56:0c:f2:97:7b:a1:5b:9a:0b:0e:75:dc:bc:ac:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:98:CD:6C:03:90:37:9C:3A:D3:FC:06:C6:5E:61:27:A3:04:DA:AA
            X509v3 Authority Key Identifier:
                keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:c6:27:5f:06:b7:f2:b5:02:7b:d4:bd:e9:b9:3c:50:37:
         fa:74:9b:a2:d3:7e:8b:c1:94:93:f0:e9:69:7d:a6:7d:eb:f5:
         bf:da:09:eb:0e:59:45:e0:2b:6a:64:d6:6b:db:60:8f:7c:63:
         15:5f:19:d6:ba:09:6b:11:58:08:1e:e9:48:3c:df:2c:da:07:
         40:7a:6e:b0:39:61:06:58:82:30:fe:d4:01:5a:db:af:a4:1f:
         1a:f3:14:81:80:b8:cd:9b:6b:79:f6:19:1d:2f:d8:30:a5:f1:
         db:17:d2:c4:39:32:8c:f4:f6:99:d9:2a:2c:ec:ed:50:7e:77:
         a5:52:4c:9e:dc:6a:95:23:0d:92:70:14:c8:c6:07:89:d3:8d:
         02:d3:58:23:87:21:ce:d0:71:14:8b:d2:fc:b1:2f:35:d3:fc:
         69:a7:5c:fc:f9:29:d2:28:c0:30:fc:51:02:b4:08:65:e3:22:
         16:02:85:9b:9c:48:ad:64:74:e4:49:55:80:e0:1b:34:80:c7:
         72:2e:06:d6:22:fd:82:40:f8:df:63:ea:d3:d7:3c:11:fe:11:
         cc:f0:f2:e9:b4:e5:a9:ab:ff:7b:5c:45:18:b8:c9:b3:f9:e9:
         94:49:31:9e:01:1e:45:fe:b8:e0:19:a5:1f:9c:91:71:55:7b:
         8d:cb:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:18 2026 by rpki-client